Once all the possible events are identified, the next step in the risk management process is to evaluate the events. As stated previously, the evaluation process would determine the probability of the particular event occurring against the impact the event would have on the business if the event were to occur.
When assessing probability of particular events occurring, a useful basis is the classification of probability into categories.
A method of doing would be as follows:
May occur only in exceptional circumstances
Could occur at some time
Might occur at some time
Will probably occur at some time
Is expected to occur in most circumstances